February 2025 Monthly Patch

12 February 2025

Microsoft has released security patches to address multiple vulnerabilities in their software and products.

The vulnerabilities that have been classified as Critical in severity are listed in the table below.

For the full list of security patches released by Microsoft, please refer to https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/2025-Feb

Critical Vulnerabilities

CVE Number	CVE Name	Base Score	Reference
CVE-2025-21177	Microsoft Dynamics 365 Sales Elevation of Privilege Vulnerability	8.7	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-21177
CVE-2025-21376	Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability	8.1	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-21376
CVE-2025-21381	Microsoft Excel Remote Code Execution Vulnerability	7.8	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-21381
CVE-2025-21379	DHCP Client Service Remote Code Execution Vulnerability	7.1	https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2025-21379

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.